yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move yisroelbaum web stack into module

Browse source
This commit is contained in:
Yisroel Baum 2026-07-31 11:30:25 +03:00
parent 5406f8c991
commit 92d6e4bad7
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
8 changed files with 81 additions and 204 deletions
Download patch file Download diff file Expand all files Collapse all files

14
secrets/README.md
View file

@ -18,6 +18,17 @@ host's age key.
3. On a workstation, put that public key into `.sops.yaml` at the repository
root and encrypt the required secret files.
## Shared Borg backup credentials
`borgbackup.yaml` contains `private-key` and `passphrase`. The resulting
secrets are shared by the TIDE and yisroelbaum.com backup jobs.
## Forgejo
`forgejo.yaml` contains `forgejo-mailer-user` and
`forgejo-mailer-passwd`. The host passes these secret paths to the
`yisroelbaum-web` module.
## TIDE
Create `tide.yaml` from `tide.yaml.example` and encrypt it with sops. It must
@ -33,3 +44,6 @@ APP_KEY=base64:...
RABBI_GERZI_INITIAL_ADMIN_EMAIL=...
RABBI_GERZI_INITIAL_ADMIN_PASSWORD=...
```
The host passes this environment file to the Rabbi Gerzi service through the
`yisroelbaum-web` module.